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Definitions 


Risk 
e Acombination of both incident likelihood and its severity 


Basic Process Control System (BPCS) 


e Control equipment and system which installed to regulate 
normal production functions (DCS, speedtronic, etc.) 


Safety Instrumented System (SIS) 


e System consisting of one or more Safety Instrumented 
functions whose purpose is to take the process to a safe 
state when predetermined conditions are violated 

Independent Protection Layer (IPL) 


e System or subsystem designed to reduce the likelihood or 
severity of the impact of an identified hazardous event by a 


large factor (10 times or more) 
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Definitions (Cont’d) 


Probability of Failure on Demand (PFD) 


e A value that indicates the probability of a system failing to 
respond to a demand 


Safety Integrity Level (SIL) 


e One of three possible discrete integrity levels of each 
Safety Instrumented Function (SIL1, SIL2, SIL3) 


e Defined in terms of Probability of Failure on Demand (PFD) 


e Used by the industry to specify the design requirements of 
SIS 


Risk Reduction Factor 
e Reciprocal of PFD 
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Methodology for SIL study 


‘C&E’ forms the guideline for scope of SIL study 


Identify and record the hazards of the process (from HAZOP) as 
‘Worst Consequence’ and ‘Consequence rating’ (Severity) of 
hazardous event(s) 


Evaluate the ‘likelihood’ for each ‘cause of the initiating event’ 


Identify existing layers of protection for the identified event for each 
‘cause of the initiating event’ 


Evaluate the effectiveness of existing and additional recommended 
layers 


Determine the number of additional layer “if required” to reduce the 
risk to “Tolerance Frequency Goal” else, “park” for later resolution 


Review the inspection and test frequency for each system that forms 
a layer of protection (during validation—phase-2) 


If a SIS exists or is required, determine the SIL (phase-2) 
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Safety Integrity Levels 


Probability of failure on 
demand per year 


(Demand mode of operation) 


Safety Integrity 
Level 


Risk Reduction Factor 
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Purpose of SIS / SIL Workshop 


Inform about safety instrumented 
systems and safety integrity levels 
Inform about why we do SIL 
assessment 

Learn how to ensure that an installed 
system can meet a given integrity level 
Support the project commitment to high 
standards of safety and environmental 
performance 
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SIS/SIL Workshop Agenda 


Introduction and Safety Briefing — XYZ 

Session 1 — Background, SIL Risk graph and LOPA 

Session 2 — Example of SIL assessment using risk graph 
Session 3 — LOPA and example of SIL assessment using 
LOPA 

Session 4 — Quantified assessment, Reliability, IEC 
61508/61511 overview 


Session 5 — How to meet a given integrity level 
Session 6 — How to meet a given integrity level, continued 


Session 7 — Valve partial stroke testing, Robustness to spurious 
trips, Operational requirements 


Session 8 — Next Steps 
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Example Safety Instrumented Function 


Mechanical 


Control Room Plant Area 
High 


Relief Valve 
Pressure to Flare 


; Sensor 
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Operator Interface 


Shutdown System 7 Water Oil 


Logic Solver 
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Typical Client’s policy context 


Typical HSE commitment - no accidents, no harm to 

people, and no damage to the environment 

. Requires proactive process safety management 
including understanding the contribution that safety 
instrumented systems make in preventing hazards & 
managing integrity 

Process Safety / Integrity Management Standard 

e Elements for “Protective systems and/or devices are to 
be designed, installed, maintained and kept in service to 
provide adequate protection to the primary containment” 

Follow client’s engineering technical practices on SIS 
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Engineering technical practices 


Based on IEC 61511-1 Functional safety — 
Safety instrumented systems for the process 
industry sector 


e Which implements IEC 61508 Functional safety of 
electrical / electronic / programmable electronic 
safety-related systems 

e And includes input from ANSI/ISA  S84.01 
Application of Safety Instrumented Systems for the 
Process Industries 
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Hazard management process 


Inherent 


Safety 


“Add-on” 
Safety 


Measures 


Are Riskš/ALARP? 
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Layers In hazard management 


Process 


Control 


Process 
Alarms 


Instrument 
Protective 
Systems I SIS 


Incident 8% 
Emergency 
Management 
Procedures 


Mechanical 
Protective 
Systems 
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SIS Issues 


1. How much reliance do we need to place on the 
protective system to address the process 
safety concerns for a given application or 
What integrity does it need to have What is its 
required performance standard 


2. Engineer and maintain the system to 
achieve the required integrity or performance 
standard during its life 
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Other reasons for SIL assessment 


Some national regulatory authorities expect it 
from prudent operators 


Allows clients to focus testing effort on the 
minority of safety systems which are critical for 
managing safety, environmental or commercial 
risks and spend less effort on the majority 
which are not 
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Safety integrity levels (SIL) 


We need a recognised means of defining integrity 
Four levels defined in IEC 61508 / IEC 61511 


Safety Probability of Probability of Risk 
Integrity Failure on Success on Reduction 
Level (SIL) Demand (PFD) Demand Factor (RRF) 


10° = 10° 99.9 - 99.99% 1,000 - 10,000 
jo = 10? 99 - 99.9% 100 - 1,000 
10" = 10“ 90 - 99% 10 - 100 


NR = Not Recommended in ISA S84.01 
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